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The polyadic p-calculus is a modal fixpoint logic whose formulas define relations of nodes rather 
than just sets in labelled transition systems. It can express exactly the polynomial-time computable 
and bisimulation-invariant queries on finite graphs. In this paper we show a hierarchy result with 
respect to expressive power inside the polyadic p-calculus: for every level of fixpoint alternation, 
greater arity of relations gives rise to higher expressive power. The proof uses a diagonalisation 
argument. 


1 Introduction 

The modal /t-calculus is a well-studied logic |[T4l |4l [3 , obtained by adding restricted second-order 
quantification in the form of least and greatest fixpoints to a multi-modal logic interpreted over labelled 
transition systems. A formula of the modal /i-calculus is thus interpreted in a state of such transi¬ 
tion systems which means that such formulas define sets of states in transition systems. For example, 
vX.fiY.{a)X V {b)Y defines the set of all states from which there is a path with labels ‘a’ and ‘b’ that 
contains infinitely many occurrences of the symbol ‘a’. 

The polyadic /i-calculus is a much less known extension of the modal /r-calculus whose formulas 
define relations rather than sets of states. They are interpreted in a tuple of states rather than a single 
state, and there are modal operators for each position in this tuple. Thus, one states “the third state has an 
‘a’-successors” for instance rather than just “there is an ‘a’-successors.” Combining such simple modal 
statements with fixpoint quantifiers yields an expressive logic with interesting applications: the polyadic 
/i-calculus was first defined by Andersen [21 and used as a logic for defining process equivalences like 
bisimilarity ifTSlfT^ . Later it was re-invented by Otto under the name Higher-Dimensional n-Calculus 
ifTOll and shown to capture the complexity class P over bisimulation-invariant class of finite graphs. I.e. a 
bisimulation-invariant property of finite graphs can be computed in polynomial time iff it is definable in 

There is a natural hierarchy in X^ given by fragments of bounded arity. The polyadic yu-calculus 
itself can be seen as a fragment of FO-i-LFP, i.e. First-Order Logic extended with fixpoint quantifiers. 
The translation naturally extends the standard translation of modal logic into first-order formulas with 
one free variable, seen as the point of reference for the interpretation of the property expressed by the 
modal formula. Polyadic formulas get interpreted in tuples of states, hence they can be seen as special 
first-order formulas with several free variables. The arity of a polyadic formula is then the minimal 
number of free variables needed to express this property in FO-i-LFP or, equivalently, the length of the 
tuples used to interpret the formula. 

The aim of this article is to show that the hierarchy formed by fragments of bounded arity, denoted 
X^, X^, ... is strict. This is not too surprising when taken literally: clearly, any satisfiable but non-valid 
formula in is not equivalent to any formula in Xj^ since the former get interpreted in k-i-1-tuples and 
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the latter only in /:-tuples. We therefore need to employ a convention that allows different fragments to 
be compared with respect to expressive power and still yields a meaningful hierarchy result. We consider 
formulas that are interpreted in a single state at the top-level, regardless of their arity. I.e. we show that 
for every k>\ there is a -formula such that there is no X^-formula tjj which yields 

1= i/^ iff 1^ 

A: times A:+l times 

for all labelled fransition systems T and all their states s. 

Arity hierarchies have been studied before, most notably by Grohe for fixpoint extensions of first- 
order logic including FO-i-LFP ifTOl . Even though each can be embedded into FO-rLFP, the arity 
hierarchy in does not follow immediately from the one in FO-rLFP. Grohe constructs formulas of arity 

1 in FO-i-LFP - they belong to the smaller FO-rTC already - and shows that they are not equivalent 
to any formulas of arity k in FO-i-LFP - not even the much larger FO-i-sPFP. However, these witnessing 
formulas are not bisimulation-invariant since they express a relation formed by the transitive closure of a 
clique relation and being a clique is clearly not bisimulation-invariant. Hence, these witnessing formulas 
are not expressible in and therefore the arity hierarchy is not transferred immediately. 

It could of course be checked whether the proof used to show the arity hierarchy in FO-rLFP could 
be adapted to work for X^ as well. It would require the search for a similar witnessing property and the 
adaption of the Ehrenfeucht-Fraisse argument to the polyadic /i-calculus. Such model comparison games 
exist for the modal yu-calculus ETll but using them to obtain inexpressibility results has proved to be quite 
difficult. 

Instead we use a simple diagonalisation argument in order to obtain a strictness result regarding arity 
hierarchies. A k-ary formula ip can be seen syntactically as a labelled transition system T^, roughly based 
on the syntax-tree representation. We can then define a k-i-l-ary formula that simulates the evaluation of 
ip on Tip and accepts those Tp which are not accepted by (p itself. Hence, we need to find a generic way 
of dualising the operators in ip. This is no particular problem, for instance, when one sees a disjunction 
then one needs to check both disjuncts, for a conjunction one only needs to check one of them. However, 
fixpoint formulas may hold or not because of infinite recursive unfoldings through fixpoint operators. 
This needs to be dualised as well, and the only way that we can see to do this is to equip the simulating 
formula with a fixpoint structure that is at least as rich as the one of the simulated formula. Consequently, 
we obtain an arity hierarchy relative to the alternation hierarchy. This does not happen for extensions of 
First-Order Eogic since it is known that there is no alternation hierarchy: every FO-i-EFP formula can be 
expressed with a single least fixpoint operator only |[T^l23]l . The situation for modal logics is different: 
more fixpoint alternation generally gives higher expressive power, at least so in the modal /i-calculus pC], 
and presumably then so in X“ as well. 

The rest of this paper is organised as follows. In Section we recall the polyadic /i-calculus and 
necessary tools like fixpoint alternation and model checking games. In Section we prove the hierarchy 
results, and in Section we conclude with a discussion on further work. 

2 The Polyadic /i-Calculus 

Labelled Transition Systems. Eet Prop = {p,q,.. .} and Act = {a,b, . ..} be two fixed, countably infinite 
sets of atomic propositions and action names. A labeled transition system (ETS) over Prop and Act is a 
tuple T = sj) where S is a set of states, ^ c S x Act x S is the transition relation. A: S —> 

labels the states with atomic propositions, and sj is some designated starting state. We will write s-^t 
instead of {s,a,t) € 
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The Syntax of X". Let Var = {X, L,...) be an infinite set of seeond-order variables. The syntax of the 
polyadie modal /r-ealeulus X" is similar to that of the ordinary modal /r-ealeulus. However, modalities 
and propositions are relativised to a natural number pointing at a position in a tuple of states used to 
interpret the formula. 

A replacement is a /<•: N —> N whieh aets like the identity funetion on almost all arguments. We 
write N N to denote the spaee of all replaeements. Sueh a replaeement is then written as {/rC/i) <— 
/i,.. .,K{im) im) when /]<...< are all those indiees for whieh we have K{ij) + ij. We will sometimes 
allow ourselves to deviate from this and to use some shorter but equally intuitive notation for sueh 
funetions. For instanee {1 2) should denote the swap between 1 and 2, i.e. it abbreviates {2 <— 1,1 <— 2). 

For teehnieal eonvenienee, we define the logie direetly in positive normal form. Formulas are then 
given by the grammar 

ip p{i)\^p{i)\X\pyip\ipLp\{a)ip\[a\np\pX.p\vX.p\Kp 

where p e Prop, a e Act, 1 > / e N and /c is a replaeement. We require that every seeond-order variable 
gets bound by a unique fixpoint quantifier p or v. Then for every formula p there is a funetion^^ whieh 
maps eaeh seeond-order variable X oeeurring in p to its unique binding formula^^(A) = pX-if/. 

The set Sub{p) of subformulas of p is defined as usual, with SubipX.p) - {pX.p} LSublp) for instanee. 

Later we will use the abbreviation t ^ p when is a literal q(i) or -^qii). This behaves like ordi¬ 
nary implieation - note that we have defined the logie in positive normal form and ean therefore not 
simply introduee implieation via negation - for sueh formulas when seen as ^ V ^ where ell is the usual 
eomplementary literal to 1. 

The arity of a formula p, denoted ar{fp) is the largest index i oeeurring in the operators p{i), {a)i, [a],- 
and {a-} in any of its subformulas. The fragment of arity kis £^:-{p\ ar{p) < k). Henee, p vA.(a)i {2 
1)A has arity 2 and it therefore belongs to all fragments X^, X^, ete., beeause it defines a relation of arity 
2 whieh ean also be seen as a relation of higher arity in whieh the 3rd, 4th, ete. eomponents of its tuples 
are simply unrestrained. 

The Semantics of X^. Formulas of X^ are interpreted in k-tuples of states of a transition system T = 

o k 

(S,—>,A,s/). An interpretation p : Var ^ 2^ is neede in order to define this induetively and give a 
meaning to formulas with free variables. For eaeh X^-formula p, is a k-ary relation of states in T, 
namely the relation defined by p under the assumption that its free variables are interpreted by p. 

ttKOlp {(i'l,...,5i:) Ip € 4(5,)) 

I-'KOlp {(i'i,...,5i:) Ip ^ 4(5,)) 

p{X) 

^p V i/^II^ H^IIJ U 

I^I]J n 

'i{a)iP% ■- s.t Si-^t and {su..-,Si-i,t,Si+i,...,Sk)€\[p]\J^} 

\L[a]ip]\p {(5i,...,5,t)|Vt: if then (5i,...,5,-i,t,5,+i,...,5^:) e 

{(5,,(l),...,5qi:)) I (5l,...,5yt) e 
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Note that the partial order c makes a complete lattice with meets and joins given by H and IJ, and the 
semantics of fixpoint formulas is then well-defined according to the Knaster-Tarski Theorem llT3ll22]l . 

We also write ‘T,s\,...,Sk\=p^ instead of (^i,..., su) € ■ If (f has no free second-order variables 

then we also drop p. In Sectionwe will often consider situations with tuples of the form 
of some length k derivable from the context. We will then simply write T,s\= ip as a short form for 
T,s,...,s\=ip. 

Two formulas ip,if/ €. are equivalent, written ip = iJ/, if d^]]^ = for ^ny T" and corresponding 
variable interpretation p. Note that two formulas can be equivalent even if they do not belong to the same 
arity fragment: if ^ e and tfj e and k k' then j e. we can interpret the one of 

smaller arity as a formula of larger arity that simply does not constrain the additional elements in the 
tuples of the relation it defines. 


Examples. 

ity. 


The standard example of a X^-formula, indeed a -formula, is the one defining bisimilar- 

ip^ ■- vX.{ ^ p{\)^p{2))A{/\[aUa)2X)A{\^2}X 
psProp flsAct 


It is indeed the case that T,s,t\= (p^ i^ s ~ t, i.e. s and t are bisimilar in T. 

As a second example consider an T'with an edge relation flight and two atomic propositions warm 
and safe. When seeing the nodes of the LTS as cities (which can or cannot be warm and/or safe and are 
potentially linked by direct flight connections), then 


{3 <- 1}^.. A <flight>2yu3f.warm(2) A safe(2) A (flight/i^.. A ({3 <- 1}^.. v [flightJiX) A {2 <- 3)X 


yields all triples {s,t,u) of cities such that there is a roundtrip from t which only traverses through warm 
and safe cities that can be reached from city s in one step - in case someone in s wants to come and 
visit - such that the trip can be traversed in both directions. This description of course uses equality 
(“roundtrip”) on cities which is not available in the logic. Instead we use bisimilarity in the formula, so 
for instance “roundtrip from t” is to be understood as a trip starting in t and ending in a city that cannot 
be distinguished from t with the means of bisimilarity. 


Fixpoint Alternation. The proof of the arity hierarchy carried out in Section needs a closer look 
at the dependencies of fixpoints inside a formula. This phenomenon is well-understood leading to the 
notion of alternation hierarchy ||9l|T8l. We give a brief intoduction to fixpoint alternation that is sufficient 
for the purposes of the next section. 

Let k>\ and ^ € X^ be fixed. For two variables X,Y € Sub{(p) we write X>^Y if X has a free 
occurrence in fp^p{Y). We use to denote the strict part of its transitive closure. E.g. in 

ip ■-pX.p{2) V {b)i{vYq(f) A vY'.ipZ.Y' V {a)iZ) A [bhY) 

we have X Y Y' Z even though there is no free occurrence of X in the fixpoint formula for Z. 

Names of variables do not matter but their fixpoint types do. So we abstract this chain of fixpoint 
dependencies into a chain p >^p v >^p v >^p p. The alternation type of a formula is a maximal descending 
chain of variables (represented by their fixpoint types) such that adjacent types in this chain are different. 
The alternation type of ip above is therefore just {p,v,p). We then define the alternation hierarchy as 
follows: respectively consists of all formulas of arity k and alternation type of length at most m 

such that the m-th last in this chain is p, respectively v, if it exists. For instance, the formula ip above 
belongs to and thefore also to and TI^ for all m > 3. It does not belong to II^. 
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Each variable X occuring in <f is also given an alternation depth ad^{X). It is the index in a maximal 
chain of dependencies Xni>ip Xi such that adjacent variables have different fixpoint types. E.g. in 
the example above we have ad^{X) = 3, adip{Y) = ad^{Y') = 2 and ad^{Z) = 1. 

The next observation is easy to see. 

Lemma 1. Let tp € and X € Sub{g>) be one of its fixpoint variables. Then the fixpoint type of X is 
uniquely determined by ad^{X), namely it is p if m and i are both odd or both even, otherwise it is v. 


Model Checking Games. We briefly recall model cheeking games for the polyadic //-ealculus lITSll . 
They are defined in the same style as the model checking games for the modal //-calculus |[20l as a game 
played between players Verifier and Refuter on the product space of an ETS and a formula. Such 
games can be used to reason about the satisfaction of a formula in a structure since both satisfaction and 
non-satisfaction are reduced to the existence of winning strategies for one of the players in these model 
checking games. 

As with the modal //-calculus games, the model checking games for the polyadic //-calculus are 
nothing more than parity games. However, they are played using k pebbles in the ETS and one pebble on 
the set of subformulas of the input formula. Hence, a configuration is a k -i- 1-tuple written si,...,Ski- 
where the Si are states of the underlying ETS 7~ = (S,—>,/l, 5 /) and is a subformula of the underlying 
formula p. 

The rules are as follows. 

• In a configuration of the form s\,.. .,Sk'<- fii, player Verifier chooses an / e {1,2) and the play 
continues with si,...,sk'r fii- Intuitively, Verifier moves the formula pebble to a disjunct from the 
current disjunction. 

• Eikewise, in a configuration of the form si,...,Sk i- fix A 1 /^ 2 , player Refuter chooses such an i. 
Here, this can be seen as refuter moving the formula pebble. 

• In a eonfiguration of the form si,...,Ski- {a)ifi, player Verifier chooses a t such that Si t and the 
play continues with ^i,. .., Si-i,t,Si+i,.. .,Sk'rfi. Intuitively, Verifier moves the /-the state pebble 
along an outgoing a-transition. The other k-l pebbles that are on states remain where they are. 
The formula pebble is also moved to the next subformula. 

• Eikewise, in a configuration of the form s\,...,Sk'r {affi, player Refuter chooses such a t. 

• In a configuration of the form s\,...,Sk'r qX.fi or ,..., 5 ^: h X such thatfp^fX) = qX.fi, the formula 
pebble is simply moved to fi, i.e. the play continues with s\,...,Sk'r fi. 

A player wins a play if the opponent cannot carry out a move anymore. Moreover, Verifier wins a 
play that reaches a configuration of the form ,..., h q{i) if <7 € A{si). If, on the other hand, q ^ 2 ( 5 ,) 
then player Refuter wins this play. Einally, there are infinite plays, and the winner is determines by the 
necessarily unique outermost fixpoint variable (i.e. the largest with respect to >^) that occurs infinitely 
often in this play. If its fixpoint type is v, then Verifier wins, otherwise it is p and Refuter wins. 

The main advantage of these model checking games is the characterisation of the satisfaction relation 
via winning strategies in parity games (which they essentially are). 

Proposition 2 ( lUSlI ). Player Verifier has a winning strategy in the game in T and a closed tp, starting 
in the configuration si,...,Sk\- p iff 7', si,...,Sk\= p. 
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3 The Arity Hierarchy 

3.1 The Principle Construction 

The aim of this section is to show that forms a strict hierarchy with respect to expressive 

power. The principles underlying the proof are easily explained: first we associate with each X^-formula 
cp an LTS with a designated starting state which we also call <p. Then we construct a closed 
formula that, when given a 7~^, reads off whaf cp is from and simulafes ifs evaluafion on if, checking 
fhaf if does not hold on ilself. 

We firsl presenf fhe consfrucfions principally, fhen discuss whaf resulfs are achieved wifh fhe defails 
of fhese consfrucfions, and finally opfimise fhe consfrucfions such fhaf fhe desired hierarchy resulf is 
achieved. We use a singlefon Act wich means fhaf we simply wrife s^t insfead of st for fhe single 
acfion name ‘a’. Likewise, we write <0>, and instead of (a),- and [a],. 

Construction of Lef k>\he fixed and fake an arbifrary closed (p € X^. We assume fhaf fhe sef 
of proposifions underlying (p is Prop = {qQ,q\,q 2 ,...}. The consfrucfion of is largely based on fhe 
synfax-free, respecfively synfax-DAG of ip. We have = {Sub{ip),^,A,ip) wifh fransifions given as 
follows. 


lAi © <A2 -^>ki 

X^if/ 


for every i/^i © 1/^2 e Sub{(p),Q e {A, V) and every i € {1,2} 
for every 0 1 /^ e Sub{p), © e {O;, k) and every / e { 1 ,...,k) 
for every qX.^ e Sub{p) and q € {yu,y) 
for every X € Sub{p) such Ihal^^(A) = qX.ijj 


Thus, fhe graph sfrucfure of X^ is indeed almosf fhe one of fhe synfax-DAG of p excepf for additional 
edges from fixpoinl variables fo fheir defining fixpoinf formula. 

The labelling of fhe nodes in X^ remains fo be defined. Remember fhaf fhe ulfimafe goal is fo 
consfrucf a formula which simulates fhe evaluafion of p on T^p. We will use k pebbles in order 
fo simulate fhe k pebbles used in p, and one addifional pebble in order fo sfore fhe subformula fhaf is 
currenfly in quesfion. Nofe fhaf fhe salisfaclion of a (closed) formula on an LTS only depends on fhe 
salisfaclion of ifs subformulas. The posifion of fhis addifional pebble will determine which subformula 
is currenfly evaluafed. We Iherefore need fo make fhe kind of subformula af a node in X^ visible fo a 
formula fhaf is inferprefed over if. This is whaf fhe sfafe labels will be used for. Lef 

Propo ipli’Pji 11 ^ i<k,j eH}U{p^,p'^}U{pf,pf | 1 < / < | 0< / < |/ceN->N) . 

The labelling in X^ is given as follows. Note fhaf Prop is counfably infinife. 


Ppi ^ 

Pji ^ 

p^ € Aiiki A 1 /^ 2 ) 
p'^ € Aiikl V ll/2) 

pf € A{Oiif/) 
pf € A{anl/) 

Pk e 


for every posifive liferal qj{i) e Sub{p) 

for every negafive liferal ^qj{i) e Sub{p) 

for every 1/^1 A 1/^2 £ Sub{p) 

for every i/^i V ^2 £ Sub{p) 

for every Onjj € Sub{p), \ <i<k 

for every Uiijj e Sub{p), I <i<k 

for every e Sub{p),K : N N 
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€ A{riX.ilf),A{X) for every T]X.t//,X € Sub{(p),r}e {/i,v) with ad^{X) = i 

With those labels a formula can see what the subformula at a node is that it is interpreted over, for 
instance whether it is a formula with a replacement modality as the principle operator, etc. 

The construction of the simulating formulas. Next we construct formulas that simulate a (f on its 
own LTs representation and check that they do not satisfy themselves. The trick is simple: if ^ e 
then we use k pebbles to simulate what tp would do with its k pebbles, and one additional pebble to check 
wich subformula we are currently evaluating. We let this pebble move through the syntax-DAG in a form 
that is dual to the semantics of the actual operators in the underlying ip\ for instance in a conjunction we 
look for one conjunct, in a disjunction we continue with both disjuncts. We will use several fixpoint 
variables to dualise the fixpoint condition similar to the way it is done in the Walukiewcz formulas that 
express the winning conditions in parity games flM . 

Let m > 0 and k > 1 be fixed. We construct a formula e as follows. 

k 

0^+' yX„,./rA,„_i ...r]X,.(/\/\pL{k + 1) ^ ^qj{i) 

i=\ jeH 
k 

i=l jeH 

A p'^ik + l)^ Ou+\Xi 
A p\k + \)^nu^,Xi 
k 

A l\pf{k + l)^UiUk+iXi 

i=\ 

k 

A l\p°(k+\)^OiUk^,X, 
i=\ 

A ^ p^^{k+\)^KUk+iX, 

/^6N--»N 

m 

A l\p^^^{k+\)^nk+iX^ 
i=l 


where rj -v if mis odd and q = p otherwise. 

Remark 1. Of course, is not a formula strictly speaking because of the potentially infinite con¬ 
junctions in the first two clauses. There is an easy way to fix this: we assume a finite set of atomic 
propositions {p,q ,...). Then a finite conjunction obviously suffices and is indeed a formula. How¬ 
ever, we need to address the issue of choice of atomic propositions in Section [T2] below anyway. So for 
the moment we simply accept the small flaw about infinite conjunctions as an intermediate step and as a 
means to separate the principles from the details in this construction. 

Note that this problem does not arise in the clause with the p'^^ since k is fixed, and k can at most 
change the first k pebbles. Hence, there are only finitely many such k. 

We need two observations about The first, a syntactic one, is easy to verify. 

Lemma 3. For every m > 0 and every k>\ we have e 
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The second one is of a semantic nature and states that does what it is supposed to do. 

Lemma 4. Let m>0,k>\ and (p e Then we have Ttp,tp \= ^ p. 

Proof. We argue using model checking games for 

Suppose we have T^,ip ^ (p, i.e. Refuter has a winning strategy for the game 0 played on 7~^, 
k pebbles initially placed on the node p in it, and the X^-formula p itself. This gives rise to a strategy 
for player Verifier in the game Q' played on T^, now k+\ pebbles placed on node p initially, and the 
formula ■ The fact that each node in satisfies exactly on atomic proposition of the kind p* and at 
most one i or at most on k means that any play which Refuter does not lose immediately selects a clause 
in carries out some operation on the pebbles and then loops through some fixpoint variable. 

It is not hard to see that Verifier can use Refuter’s strategy from Q to follow the operations carried 
out on the pebbles prescribed by each clause without losing. For instance, if the third clause demands 
her to choose a successor for the k + 1-st pebble then she takes the one that represents the conjunct that 
Refuter would chose in the same situation in Q. This way, every play in Q' that conforms to her strategy 
has an underlying play in Q that conforms to Refuter’s strategy there. If that one is won by Refuter 
because Verifier got stuck at some point then this can only be because the play reached a position of the 
form and Si has no successor. In the corresponding play in Q', pebble k+\ will be on 

a node with label pf, and this requires Refuter to move the /-th pebble to a successor which equally he 
cannot. Notice that the clause with p^ contains the operator □ and vice-versa. Thus, Verifier wins the 
corresponding play in Q'. 

Suppose that the underlying play in Q is won by Refuter because the largest fixpoint variable X that 
is seen infinitely often is of type p. Then we must have ad^{X) = i for some i, and then the play in 0' 
will infinitely often go through positions that are labelled with p^^, and it will eventually not go through 
positions that are labelled with p^f with i' > i anymore. All that remains to be seen in this case is that 
the largest variable seen infinitely often in the play on is of type v. This is a direct consequence of 
Lemma [T] Hence, Verifier wins such plays, too, which shows that her strategy derived from Refuter’s 
winning strategy in Q is winning for her in Q'. 

This is shown by contraposition in the same way now assuming a winning strategy for Verifier 
in the game on Tjp and p and turning it into a winning strategy for Refuter in the game on Tjp and . 


]<.+1 


Lemma 5. Let m>0 and k> 1. There is no p€'L^ such that p = ^\ 

Proof. Suppose there was such a p. Then we would have 

T^,p^p iff iff T^,py=p 

firsf because of fhe assumed equivalence and second because of Lemma 

Thus, we could summarise fhe findings from fhese lemmas and also uses fhe observafion fhaf fhe 
entire consfrucfion is equally possible for formula in nf„ fhen yielding a € 2^,'*'^. Then we gel fhaf 
for all ni> 0 and k > 1 we have ^ and H^ ^ Consequenfly, we have c and 


Ut 


cn*=+i. 

m+1 


The reason why we do nol formally slate Ihis as a Iheorem (yel) is discussed nexl. 


3.2 The Hierarchy over a Fixed Small Signature 

Consider whaf is happing wifh fhe sel of atomic propositions in fhe consfrucfion of fhe previous Sec¬ 
tion 3.1 We have already seen in Remark [T] fhaf fhe consfrucfion does nol work for an infinile sel of 
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atomic propositions Prop. Even if this is finite, then the construction does work but it has the following 
effect: we simulate a formula with k pebbles over Prop by a formula with k+1 pebbles over PropU Propg. 
It is not surprising that we obtain formulas over this extended signature which cannot be expressed over 
the smaller one. In order to argue that the hierarchy of inexpressibility as laid out in the previous sec¬ 
tion is truly meaningful we would need Prop = Prop U Propo or, at least, that the two sets have equal 
cardinality so that some bijection between them could be used as an encoding. 

In the following we will show how the construction can be fixed such fhaf if works over a fixed finife 
sef 

Propi := 

of atomic propositions. Thus, we do nof encore fhe index of proposifions, fhe level in fhe fixpoinl 
hierarchy, and fhe kind of operation on pebbles in fhose proposifions anymore. Insfead we will encode 
Ibis missing informalion in fhe graph sfrucfure of (rafher fhan in ifs labels). For fhe replacemenf 
modalifies k we need a liffle preparafion. 

A replacemenf k is called simple if if is of fhe form {/ <— j) or {/ j). A formula is called normalised 

if every replacemenf in if is simple. The following is a simple consequence of fhe fad fhaf every function 
/r: N N fhaf leaves all numbers greater fhan k untouched, can be consfrucfed by a sequence of swaps 
befween i, j < k, followed by some simple mappings from some i fo a j. 

Lemma 6. Let m > 0, k > \. Every ip e respectively fl^ is equivalent to a normalised ip' e 
respectively fl^. 

We Iherefore assume fhaf from now on, all formulas tp fo be simulafed are normalised. We change 
fhe consfrucfion of 7“^ as follows. 

1. Suppose fhere is a slate s of fhe form qj{i) or ^qj{i), necessarily labeled wilh pL or p“.. Replace 
fhe proposilion by p^, respeclively p~ , and add a new finife palh of lenglh i + j fo Ibis node such 
fhaf fhe (/ - l)-sl new slate has fhe label p*. 



Lei :={k<— 1,1 <—2,...,k-l <— k) and consider fhe formula 

searchPeb\={p* Aqj{l))\/K^^^Ok+\{{p* Aqj{l))yMA^))---)) 

( 1 ) 

wilh k-\ occurrences of If is Irue in s al pebble k+\ wilh fhe addilional palh iff qj{i) was 
Irue in s wilh fhe original consfrucfion. The firsl pari of Ihis new palh is used fo shifl fhe pebbles 
until fhe /-lb has become fhe firsl and Ihen, insfead of checking whelher fhe /-lb pebble is on a 
slate salisfiying qj, we can now check fhe firsl one insfead. Nole fhaf Ibis formulas moves pebble 
number k+1 along Ibis new palh bul fhe olher k pebbles remain where Ihey are; aparl from being 
cyclically changed around. 

We can of course equally conslrucl such a formula fhaf mimicks fhe checking of ^qj{i). 

Finally, we also need fo use fhe remaining palh fo read off fhe encoding of j. This can easily be 
done as follows. 


searchPropj := ^o(l) V Ok+i(qi(l) V Ok+iiqiil) V .. .Ok+iiqu-iW V Ok+iqh-i{l)) ■ ■ ■)) 
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This formula is then used instead of < 7 /(l) in (jTJl, and the resulting formula is used instead of qj{i) 
in the elause for p~. in ■ Hence, this clase simply becomes 

... A p~- —> searchPeb[searchProp/qj{l)] 

where denotes the formula that results from ij/ by replacing every subformula;y' with;^^. 

2. An edge of the form qX.if/^il/ or A—is replaced in similar style by a sequence of i edges, 
marking the last state after them with p*. Then we can replace the label p^^ with p^^ in the first 
state, and the corresponding clause in with 

...Ap^^ ^ Uk+idp* A Xi) V Uk+idp* AX 2 ) V Di+iC... V Uk+iip* AX„,) ...))) 

3. An edge of the form —> i/^ or n,!/^ —> is replaced by a sequence of 2i edges via new states, and 

p* must hold after i and after 2/ steps. The trick to use here is to cycle the first k pebbles until the 
f-th one becomes the first, then execute the corresponding action for the /-pebble on the first one 
instead, and then cycle them back again. Let be as above and {2 1,3<— 2, ...,1 <— k). 

Then we can replace the clause for pf in by 

... —> (p* A ak+iia\goBack V k^q{p* A Uk+iiaigoBackV .. .(p* A Dk+iUigoBack )...))) 

with exactly k-l occurrences of and 

goBack := Qi+iCCp* A Xi) V K^^^Uk+iUp* A Ai) V ... n^.+iCp* aAi)...)) 

with exactly k-l occurrences of 

Likewise, we can use the same trick to eliminate the dependence on / of the formula in the 
clause for p° which is equally replaced by p°, and those paths of length 2/ can be used to decode 
the value i from the graph structure instead of reading it straight off the atomic proposition. 

4. Finally, we can use the same trick in a slightly more elaborate fashion to handle replacement 

modailities of the form {/ <— j} and {/ j). We mark nodes in 7~tp that correspond to the form by 

p'^P and those that correspond to the latter by p®'". A swap of the form {/ j} can be handled as 
follows: assume / < j. 

(a) Cyclically shift the pebbles 1, • ■ •, ^ for / positions to the left. 

(b) Cyclically shift the pebbles 2,...,k for j-i-l positions to the left. 

(c) Swap pebbles 1 and 2. 

(d) Cyclically shift the pebbles 2,..., k for j-i-l positions to the right. 

(e) Cyclically shift the pebbles 1, • ■ •, ^ for / positions to the right. 

Hence, we replace a transition of the form {/«— j}tk -^j/by a path of length 2j -2 and mark the 
states at positions /, j - I, 2j - 2 and the last one with p* so that we can, like above, construct a 
formula that mimicks the five steps above to carry out the swapping of pebbles / and j. 

The construction for replacements of the form {/ <— j} is similar. Again, the trick is to cycle i and j 
to positions 1 and 2, carry the replacement out on these fixed positions, and cycle the pebbles back 
again. These eliminates the dependence of on propositions which carry such a value. 
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With this being done, becomes a formula that is defined over a fixed sef Propj of atomic proposi¬ 
tions of size 10, and we can use it to simulate formulas ^ e over the same Propj. Then the inexpress- 
ibility result of the previous section becomes meaningful. Using standard encoding techniques we can 
break the resul down to over two atomic propositions only, using binary encoding, or a single one, 
using unary encoding. The atomic propositions can also be eliminated entirely by appending certain fi¬ 
nite trees to the states in which they hold such that these trees are checkable using fixpoint-free formulas 
of X^. Hence, we get the following. 

Theorem 7. For all m>0 and k> I we have ^ and H^ ^ Consequendy, we have c 

results hold independently of the underlying signature Prop and Act. 

4 Conclusion and Further Work 

We have shown that the arity hierarchy in the polyadic /i-calculus, a modal fixpoint logic for specifying 
bisimulation-invariant relational properties of states in transition systems, is strict in the sense that higher 
arity gives higher expressive power provided that one is allowed to use a little bit more fixpoint alternation 
(E^ c E*Yi)- If alternation must not increase then higher arity yields not necessarily more but different 
expressiveness (Ef„ ^ Hf/^). 

Obviously, the exact effects on expressive power that should be attributed to arity and to fixpoint 
alternation need to be separated. A first step would be to prove the strictness of the alternation hierarchy 
within each X^. For k = I, i.e. the ordinary ju-calculus, this is known for arbitrary and in particular for 
finite transition systems O [171. Subsequently, the result could be shown for several other classes of 
transition systems, for instance binary trees [Si [71, nested words fTTII and graphs whose edge relation 
satisfies certain properties like being transitive for instance ||8l[Tl. 

We suspect that not only is the alternation hierarchy within each also strict, but equally that 
Arnold’s proof |0 using a similar diagonalisation argument for X^ can be extended. It relies on the 
interreducibility between model checking for X^ and parity games EDI and in particular the existence of 
the Walukiewicz formulas defining winning regions in parity games E41 . It is known lITSl that the model 
checking problem for Xj^ and any k>\ can equally be reduced to a parity game, and it seems feasible to 
extend the construction of the Walukiewicz formulas to higher arity. This would use similar principles 
as those underlying the construction of in Section]^ 

Model checking X^ can also be reduced to model checking X^ directly using k-products of transition 
systems, i.e. there is a translation of X^-formulas to X^-formulas that preserves truth under taking k-fold 
products of transition systems |[T9l[T5l . Hence, the question of the strictness of the alternation hierarchy 
in Xp is equivalent to the question after the strictness of the X^ alternation hierarchy over the class of all 
k-fold products of transition systems. 
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